Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d29ed82-d3e0-4bba-9c6f-839f81b2a766/adc5ccf7b6fd9fa860e714a148af15a0d0784e89.roa
File:                     adc5ccf7b6fd9fa860e714a148af15a0d0784e89.roa (raw, json)
Hash identifier:          MAvY8XEwRlrN3yNQXOJPJ+Qmi9/jU/RyGEMZfl2dry4=
Subject key identifier:   F7:CA:CE:7C:D3:FF:C0:7F:69:79:BF:A9:51:20:6F:44:3F:FB:26:42
Certificate issuer:       /CN=18578d1d6434fa77964783314509fc7818281b0a
Certificate serial:       1CD1C7
Authority key identifier: 97:61:AD:77:6B:C5:B1:65:2C:6E:5C:B6:F9:66:64:40:23:C3:4E:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/18578d1d6434fa77964783314509fc7818281b0a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5d29ed82-d3e0-4bba-9c6f-839f81b2a766/adc5ccf7b6fd9fa860e714a148af15a0d0784e89.roa
Signing time:             Thu 11 May 2023 23:50:09 +0000
ROA not before:           Wed 10 May 2023 23:50:07 +0000
ROA not after:            Sun 11 May 2025 23:50:07 +0000
asID:                     270158
IP address blocks:        45.189.252.0/22 maxlen: 24
                          2806:36a::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1888711 (0x1cd1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18578d1d6434fa77964783314509fc7818281b0a
        Validity
            Not Before: May 10 23:50:07 2023 GMT
            Not After : May 11 23:50:07 2025 GMT
        Subject: CN=adc5ccf7b6fd9fa860e714a148af15a0d0784e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:96:03:d6:f1:49:e9:d2:bd:09:45:1f:f9:87:
                    4f:0b:f4:26:b0:4f:fc:f1:a2:b5:0f:f0:18:c8:0e:
                    8d:23:af:ac:21:59:72:b7:23:fc:8f:07:b9:dc:fa:
                    af:e1:12:d4:37:ec:3a:1e:dd:55:31:5a:18:ac:6f:
                    50:7a:f3:3f:f7:18:3b:dc:fe:b1:e6:b3:91:2f:56:
                    c1:0c:68:ac:c8:e5:3c:70:72:07:c4:d9:88:12:29:
                    93:ce:1d:48:03:28:6c:24:9a:7c:97:78:ad:86:df:
                    54:1c:58:9d:66:b6:1c:84:e2:40:fc:fd:c6:59:cb:
                    a2:7f:b1:95:33:a3:47:9e:35:1a:9f:e5:17:77:24:
                    72:04:2d:0b:79:48:ca:70:94:c0:a9:ad:29:8f:29:
                    9a:b6:bb:08:ae:da:58:46:b7:44:10:e3:c6:56:a9:
                    8b:c7:40:27:c2:ad:ff:7f:da:65:29:81:0a:2c:7a:
                    7c:1b:5f:ab:c4:e6:07:86:68:67:63:ca:1a:22:3e:
                    27:c1:4c:0c:e2:8f:db:1f:37:6f:8f:17:80:f3:77:
                    61:8b:f6:45:35:4f:f0:29:5c:43:79:7b:80:24:df:
                    24:ec:3a:3a:3c:ea:4e:d4:e3:08:7e:23:d3:ab:05:
                    3e:56:2f:7b:a6:21:38:e6:fd:ad:9d:71:c4:af:6b:
                    55:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CA:CE:7C:D3:FF:C0:7F:69:79:BF:A9:51:20:6F:44:3F:FB:26:42
            X509v3 Authority Key Identifier:
                keyid:97:61:AD:77:6B:C5:B1:65:2C:6E:5C:B6:F9:66:64:40:23:C3:4E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/18578d1d6434fa77964783314509fc7818281b0a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d29ed82-d3e0-4bba-9c6f-839f81b2a766/adc5ccf7b6fd9fa860e714a148af15a0d0784e89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5d29ed82-d3e0-4bba-9c6f-839f81b2a766/18578d1d6434fa77964783314509fc7818281b0a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.252.0/22
                IPv6:
                  2806:36a::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:96:9e:e3:da:3a:64:71:ff:a3:28:1c:9f:8c:fa:49:cc:a0:
         c3:91:a8:2b:ee:41:a9:3f:5d:4f:3f:34:46:3c:c1:40:c1:91:
         0a:07:47:5b:c8:49:da:bd:a1:30:06:b9:d3:0b:60:6d:da:c1:
         44:8e:64:84:bb:94:fc:7b:6a:8e:8b:70:05:bc:fd:84:02:ea:
         2f:cf:1e:6c:18:64:1b:a0:0e:2f:74:09:20:4b:24:78:22:33:
         1a:4b:81:b7:c5:28:09:6e:2b:14:7c:9e:f4:35:ee:c9:77:f7:
         20:d7:47:d8:50:d5:12:79:0d:5e:b5:6e:b0:a0:38:93:36:bf:
         05:d0:75:a3:e2:42:23:3f:ce:3d:94:d9:a6:f2:6a:97:54:f4:
         46:40:b6:28:f5:fc:b6:75:f0:60:69:ef:5a:ca:18:df:93:85:
         fb:72:ff:06:5a:79:c6:a7:69:36:c0:c9:5d:6b:53:a4:d3:1d:
         bf:c4:63:aa:5d:19:bf:7a:d9:16:2e:4f:dc:39:ad:3e:5e:30:
         41:03:7d:ba:a7:f5:08:18:31:35:56:5d:4a:62:0f:8d:30:88:
         b0:55:19:d0:c0:b8:97:dc:63:61:8a:21:6d:7c:81:30:86:e5:
         21:23:5e:a3:3e:b0:bc:7b:6d:c6:21:3b:3c:59:e8:9e:f1:f6:
         97:e8:d7:cb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDHNHHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE4
NTc4ZDFkNjQzNGZhNzc5NjQ3ODMzMTQ1MDlmYzc4MTgyODFiMGEwHhcNMjMwNTEw
MjM1MDA3WhcNMjUwNTExMjM1MDA3WjAzMTEwLwYDVQQDEyhhZGM1Y2NmN2I2ZmQ5
ZmE4NjBlNzE0YTE0OGFmMTVhMGQwNzg0ZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA2pYD1vFJ6dK9CUUf+YdPC/QmsE/88aK1D/AYyA6NI6+sIVly
tyP8jwe53Pqv4RLUN+w6Ht1VMVoYrG9QevM/9xg73P6x5rORL1bBDGisyOU8cHIH
xNmIEimTzh1IAyhsJJp8l3itht9UHFidZrYchOJA/P3GWcuif7GVM6NHnjUan+UX
dyRyBC0LeUjKcJTAqa0pjymatrsIrtpYRrdEEOPGVqmLx0Anwq3/f9plKYEKLHp8
G1+rxOYHhmhnY8oaIj4nwUwM4o/bHzdvjxeA83dhi/ZFNU/wKVxDeXuAJN8k7Do6
POpO1OMIfiPTqwU+Vi97piE45v2tnXHEr2tVXwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFPfKznzT/8B/aXm/qVEgb0Q/+yZCMB8GA1UdIwQYMBaAFJdhrXdrxbFlLG5c
tvlmZEAjw05uMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTg1Nzhk
MWQ2NDM0ZmE3Nzk2NDc4MzMxNDUwOWZjNzgxODI4MWIwYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWQyOWVkODItZDNlMC00YmJhLTljNmYtODM5Zjgx
YjJhNzY2L2FkYzVjY2Y3YjZmZDlmYTg2MGU3MTRhMTQ4YWYxNWEwZDA3ODRlODku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZDI5ZWQ4Mi1kM2UwLTRiYmEtOWM2Zi04Mzlm
ODFiMmE3NjYvMTg1NzhkMWQ2NDM0ZmE3Nzk2NDc4MzMxNDUwOWZjNzgxODI4MWIw
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi29/DANBAIAAjAHAwUAKAYDajANBgkqhkiG9w0BAQsFAAOC
AQEAEJae49o6ZHH/oygcn4z6Scygw5GoK+5BqT9dTz80RjzBQMGRCgdHW8hJ2r2h
MAa50wtgbdrBRI5khLuU/HtqjotwBbz9hALqL88ebBhkG6AOL3QJIEskeCIzGkuB
t8UoCW4rFHye9DXuyXf3INdH2FDVEnkNXrVusKA4kza/BdB1o+JCIz/OPZTZpvJq
l1T0RkC2KPX8tnXwYGnvWsoY35OF+3L/Blp5xqdpNsDJXWtTpNMdv8Rjql0Zv3rZ
Fi5P3DmtPl4wQQN9uqf1CBgxNVZdSmIPjTCIsFUZ0MC4l9xjYYohbXyBMIblISNe
oz6wvHttxiE7PFnonvH2l+jXyw==
-----END CERTIFICATE-----